← CVE Intelligence

CVE-2024-56738

GNU / GRUB2 PUBLISHED

Description (CNA)

GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.

Affected (CNA)

Vendor / productVersions
GNU / GRUB2affected 2.00 through 2.12

CWE

CWE-208

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.